EP0588339A2
Expired / Lapsed
EP
⏱️ 0.0 years remaining
Method and apparatus for settlement of accounts by IC cards
Assignee: NTT Inc
•
Filing: 1993-09-16
•
Granted: —
•
Expires: 2013-09-16
Abstract
Abstract An IC card (6) has a card information memory area wherein there are written a master public key nA, card secret keys pU and qU, a card public key nU, a card identification number IDU, and a first master digital signature SA1 for information including the card identification number. An IC card terminal (2a,2b) has terminal information memory area wherein there are written a master public key nA, terminal secret keys pT and qT, a terminal public key nT, a terminal identification number IDT, and a second master digital signature SA2 for information including the terminal identification number IDT. When inserted into the IC card terminal, the IC card sends thereto the data nU, IDU, and SA1. The IC card terminal verifies the digital signature SA1 by the master public key nA and, if it is valid, transmits the data nT, IDT and SA2 to the IC card. The IC card verifies the digital signature SA2 by the master public key nA and, if it is valid, transmits information corresponding to the current remainder value V to the IC card terminal. The IC card terminal makes a check to see if the received information corresponding to the remainder value V is appropriate, and if so, becomes enabled for providing a service.
Inventors
- 👤 Ginya Ishiguro
- 👤 Toshiyasu Muta
- 👤 Kazutaka Sakita
- 👤 Shoji Miyaguchi
- 👤 Tatsuaki Okamoto
- 👤 Atsushi Fujioka
Bibliographic Details
Application Number
—
Jurisdiction
EP
Data Source
google_patents
Last Synchronized
2026-11-07 14:51
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/36; G06Q20/367; G06Q20/3672; G06Q20/3674; G06Q20/3676; G06Q20/38; G06Q20/382; G06Q20/3829; G06Q20/40; G06Q20/401; G06Q20/409; G06Q20/4097; G06Q20/40975; G06Q40/00; G06Q40/02; H; H04; H04L; H04L9/00; H04L9/32; H04L9/3226; H04L9/3247; H04L9/3271; H04L9/3273; H04L9/3297; H04L2209/00; H04L2209/56
Claims Analysis
Total Claims: 27
Claim 1
Independent Claim
431 words
A method for the settlement of charges by an IC card wherein said IC card has card information memory means in which there are written from a management center a master public key nA for verifying a master digital signature SA created by said management center by use of master keys pA and qA, card secret keys pU and qU for creating a digital signature by said IC card, a card public key nU for verifying said digital signature of said IC card, a card identification number IDU and a first master digital signature SA1 created by use of said master keys for information including said card identification number IDU, and an IC card terminal has terminal information memory means in which there are written from said management center said master public key nA, terminal secret keys pT and qT for creating a digital signature by said IC card terminal, a terminal public key nT for verifying said digital signature of said IC card terminal, a terminal identification number IDT and a second master digital signature SA2 created by use of said master keys pA and qA for information including said terminal identification number IDT, and wherein said IC card is issued from said management center via an IC card dispenser and used to receive a service at said IC card terminal and settle the charge therefor, said method comprising: a step wherein said IC card transmits said card public key nU, said card identification number IDU and said first master digital signature SA1 to said IC card terminal; a step wherein said IC card terminal verifies said first master digital signature SA1 and, if it is valid, transmits said terminal public key nT, said terminal identification number IDT and said second master digital signature to said IC card; a step wherein said IC card verifies said second master digital signature SA2 and, if it is valid, transmits information corresponding to the current remaining value V to said IC card terminal; a step wherein said IC card terminal makes a check to see if said information corresponding to said current remaining value V is appropriate and, if it is appropriate, becomes enabled for providing a service; a step wherein, after completion of said service, said IC card terminal creates an updated remaining value V' and generates a terminal digital signature ST for information including said updated new remaining value and then transmits said terminal digital signature ST to said IC card together with said updated remaining value V'; and a step wherein said IC card verifies said terminal digital signature ST.
Claim 2
Dependent Claim
100 words
The method of claim 1, wherein said step of transmitting said information corresponding to said current remaining value V of said IC card is a step wherein said IC card creates digital signature for information including said current remaining value V and transmits it to said IC card terminal together with said current remaining value V and said card public key nU, and said step of checking said remaining value by said IC card terminal is a step wherein said IC card terminal verifies said digital signature of said IC card and, if valid, becomes enabled for providing said service.
Claim 3
Dependent Claim
167 words
The method of claim 2, which includes a step wherein when it is verified at said IC card terminal that said first master digital signature SA1 is valid, said IC card terminal generates a random number R and transmits it to said IC card; and wherein said step of creating said digital signature of said IC card is a step wherein when it is verified that said second master digital signature is valid, said IC card generates a random number X and creates a digital signature for information including said remaining value V and said random numbers R and X, as said digital signature SU for information including said remainder value V; and wherein said step of creating said terminal digital signature of said IC card terminal is a step wherein said IC card terminal creates a digital signature for information including said updated remaining value V' and said random numbers R and X, as said digital signature ST for information including said updated remainder value V'.
Claim 4
Dependent Claim
47 words
The method of claim 1, wherein said IC card has usage information memory means, and which further includes a step wherein after completion of said service said IC card updates the contents of said usage information memory means with whole information received from said IC card terminal.
Claim 5
Dependent Claim
98 words
The method of claim 1, wherein said IC card terminal has usage/management memory means, and which further includes: a step wherein after completion of said service said IC card terminal generates usage/management information from information including at least said remaining value V and said card identification number IDU received from said IC card prior to the start of said service and writes said usage/management information into said usage/management memory means; and a step wherein said IC card terminal transmits said usage/management information stored in said usage/management memory means to said management center when a predetermined condition is satisfied.
Claim 6
Dependent Claim
93 words
The method of claim 1, 2, 3, or 4, wherein said IC card terminal has a list of invalid card identification numbers provided from said management center, and which further includes a step wherein when having received said card identification number IDU from said IC card, said IC card terminal matches said card identification number with all of said invalid card identification numbers and, if said card identification number IDU matches any one of said invalid card identification numbers, said IC card terminal judges that said IC card is invalid, then discontinues processing.
Claim 7
Dependent Claim
183 words
The method of claim 6, wherein said IC card terminal has usage/management memory means and said management center has a database, and which further includes: a step wherein after completion of said service said IC card terminal generates usage/management information from information including at least said remaining value V and said card identification number IDU received from said IC card prior to the start of said service and writes said usage/management information in said usage/management memory means; a step wherein said IC card terminal transmits said usage/management information stored in said usage/management memory means to said management center when a predetermined condition is satisfied or in response to a request from said management center; and a step wherein said management center matches said received usage/management information with usage/management information prestored in said database and, if they match each other, transmits said card identification number IDU of said usage/management information as an invalid card identification number to each IC card terminal for addition to said list therein, and when no match is found, said management center adds said received usage/management information to said database.
Claim 8
Dependent Claim
409 words
The method of claim 4, wherein said IC card terminal has, as a troubled terminal list, troubled terminal identification numbers, initial values of a time stamp and the number of its updates both corresponding to said troubled terminal numbers, provided from said management center, and the previous card usage information held in said usage information memory means of said IC card includes the previous terminal identification number, a time stamp digital signature created by the previously used IC card terminal for information including a time stamp by use of its terminal secret keys and the previous number of updates, said method further including: a step wherein said IC card terminal updates and generates a time stamp TS at desired time intervals from a time stamp initial value provided from said management center with a predetermined recurrsive lagorithm and updates the number of updates and transmits said number of updates to said management center for each pudate; a step wherein prior to the start of said service said IC card terminal receives from said IC card the previous terminal identification number, a digital signature for information including said previous time stamp and said previous number of updates and makes a check to see if said received previous terminal identification number matches any one of said troubled terminal identification number in said list; a step wherein when said received previous terminal identification number is found in said troubled terminal number list, said IC card terminal updates said time stamp from said time stamp initial value by a number of times equal to said previous number of updates in accordance with said algorithm to obtain a pseudo-current time stamp; a step wherein said IC card terminal verifies a digital signature of said time stamp by said pseudo-current time stamp and said terminal public key nT; and a step wherein when it is verified that said digital signature of said time stamp is valid, said IC card terminal compares said received number of updates with the number of updates read out of said memory means and, when the latter is smaller than the former, said IC card terminal judges that said IC card is invalid and discontinues processing, and when the latter is not smaller than the former, said IC card terminal judges that said IC is valid, and, after providing said service, creates a time stamp digital signature for information including said current time stamp and transmits it to said IC card.
Claim 9
Dependent Claim
75 words
The method of claim 8, wherein said management center has a database for managing all terminal identification numbers, all the stamp initial values and all numbers of updates, and which further includes a step wherein upon receiving said terminal identification number and said number of updates from said IC card terminal, said management center uses said received number of updates to re-write the number of updates of the corresponding terminal identification number in said database.
Claim 10
Independent Claim
253 words
A method of creating an IC card, comprising: a step wherein an IC card dispenser transmits, to said IC card, card information including: a master public key nA for verifying a master digital signature created by a management center; card secret keys pU and qU for creating a digital signature by said IC card; a card public key nU for verifying said digital signature of said IC card; a card identification number IDU; and a first master digital signature SA1 created by said management center for information including said card public key nU and the card identification number IDU; a step wherein said IC card verifies said first master digital signature SA1 and, if valid, writes said card information into card information memory means; a step wherein said IC card reads out said card public key nU, said card identification number IDU and said first master digital signature SA1 from said card information memory means and transmits then to IC said card dispenser; a step wherein IC said card dispenser verifies said first master digital signature and, if valid, transmits, to said IC card, an amount value V created by said management center and a third master digital signature SA3 for information said value V and said card identification number IDU; and a step wherein said IC card verifies said third master digital signature SA3 and, if valid, writes information including said value V and said third master digital signature SA3, as initial data of card usage information, into usage information memory means.
Claim 11
Dependent Claim
202 words
The method of claim 10, which further includes: a step wherein said IC card dispenser verifies said first master digital signature SA1 and, if valid, generates and transmit a random number Y to said IC card; a step wherein said IC card generates a random number X and creates a digital signature SU for information including said value V and said random numbers X and Y and then transmits said digital signature SU said IC card dispenser together with said random number X; a step wherein said IC card dispenser verifies said digital signature SU and, if valid, transmits said random numbers X and Y, said value V and said card identification number IDU to said management center; a step wherein said management center creates, as said master digital signature SA3, a digital signature for information including said random numbers X and Y, said value V and said card identification number IDU and transmits said digital signature to said IC card via said IC card dispenser; and a step wherein said IC card writes said third master digital signature, as said card usage information, into said usage information memory means together with said value V and said random numbers X and Y.
Claim 12
Dependent Claim
102 words
The method of claim 10 or 11, wherein said IC card has prestored therein an encrypting key KU produced by said management center from said identification number IDU by use of a master key KA at the time of writing said card identification number IDU, and when receiving said card identification number IDU, said management center creates said encrypting key KU by use of said master key KA and transmits said encrypting key KU to said IC card dispenser, and wherein transmission and reception between said IC card, said management center and said IC card dispenser is conducted using said encrypting key.
Claim 13
Dependent Claim
315 words
A password registration method for an IC card, wherein said IC card has card information memory means wherein there are written, as card information, from a management center a card identification number IDU, a predetermined setting number Ns, a fourth master digital signature SA4 for said setting number Ns, and a fifth master digital signature SA5 for information including said card identification number IDU and said fourth master digital signature SA4, and wherein an IC card terminal has terminal information memory means wherein there are written, as terminal information, from said management center a master public key nA for verifying a master digital signature, terminal secret keys pT and qT for creating a digital signature by said IC card terminal and a terminal public key nT for verifying said terminal digital signature; said method comprising: a step wherein said IC card transmits said card identification number IDU and said fourth and fifth master digital signatures SA4 and SA5 to said IC card terminal; a step wherein said IC card terminal verifies said fifth master digital signature SA5 and, if valid, becomes enabled for password registration processing and transmits a setting number Ns' to said IC card when it is entered; a step wherein said IC card transmits an authentication signal to said IC card terminal when said setting number Ns' received from said IC card terminal matches said setting number Ns in said card information memory means; a step wherein upon receiving said authentication signal, said IC card terminal becomes enabled for entering of password and creates a terminal digital signature ST for information including an entered password Nc and transmits said terminal digital signal ST to said IC card together with said password Nc and said terminal public key nT; and a step wherein said IC card verifies said terminal digital signature ST and, if valid, writes said password Nc into password memory means.
Claim 14
Dependent Claim
169 words
The method of claim 13, wherein said IC card has card secret keys pU and qU for digital signature creating use and a card public key nU prestored in said card information memory means from said management center, and which further includes: a step wherein when said password Nc is entered, said IC card terminal generates a random number R and transmits it to said IC card; a step wherein upon receiving said random number R, said IC card generates a random number X and creates a card digital signature SU for information including said random numbers R and X and transmits said digital signature SU to said IC card terminal together with said random number X and said card public key nU; and a step wherein said IC card terminal verifies said card digital signature SU and, if valid, creates a terminal digital signature for information including said random numbers R and X and said password Nc and sends it as a digital signature including said password Nc.
Claim 15
Independent Claim
278 words
A method for the settlement of charges by an IC card, wherein said IC card has card information memory means wherein there written, as card information, from a management center a card identification number IDU, a predetermined setting number Ns, a fourth master digital signature SA4 for said setting number Ns and a fifth master digital signature SA5 for information including said card identification number IDU and said fourth master digital signature SA4, and wherein an IC card terminal has terminal information memory means wherein there are written, as terminal information, from said management center a master public key nA for verifying a master digital signature, terminal secret keys pT and qT for the creation of a terminal digital signature and a terminal public key nT for verifying said terminal digital signature; said method comprising: a step wherein said IC card transmits said card identification number IDU and said fourth and fifth master digital signatures to said IC card terminal; a step wherein said IC card terminal verifies said fifth master digital signature SA5 and, if valid, instructs the entering of a password and transmits a password Nc' to said IC card when it is entered; a step wherein said IC card matches said password Nc' with said password Nc in said card information memory means and, if they match, transmits an authentication signal to said IC card terminal; and a step wherein upon receiving said authentication signal, said IC card terminal becomes enabled for providing a service and, after completion of said service, records information including an amount value V for said service and said received card identification number IDU, as usage/management information, in usage/management memory means.
Claim 16
Dependent Claim
154 words
The method of claim 15, wherein said IC card has card secret keys pU and qU for the creation of a digital signature and a card public key nU prestored in said card information memory means from said management center; and which further includes: a step wherein when said password Nc is entered, said IC card terminal generates and transmits a random number R to said IC card; a step wherein upon receiving said random number R, said IC card generates a random number X and creates a card digital signature SU for information including said random numbers R and X and transmits it to said IC card terminal together with said random number X and said card public key nU; and a step wherein said IC card terminal verifies said card digital signature SU and, if valid, becomes enabled for providing a service, on the assumption that it has received said authentication signal.
Claim 17
Dependent Claim
240 words
An IC card terminal comprising: a memory wherein there are prestored a master public key nA for verifying a digital signature, terminal secret keys pT and qT for the creation of a terminal digital signature, a terminal identification number IDT, a terminal public key nT for verifying said terminal digital signature, and a second master digital signature SA2 for information including said terminal identification IDT and said terminal public key nT; means for verifying a first master digital signature SA1, received from an IC card, by said public key nA and for transmitting an authentication notice to said IC card when said first master digital signature SA1 is valid; means whereby a digital signature Su of said IC card for information including an amount value V and a card identification number IDU, received from said IC card, is verified by a card public key nU and a service is initiated when said amount value V is valid and sufficiently large; means whereby upon completion of said service, the charge for said service is subtracted from said amount value V to obtain a remainder value V' and a digital signature ST by said terminal key for information including the remaining value V' and said card identification number IDU; and means for transmitting said digital signatures ST, said remaining value V', said second master digital signature SA2, said terminal public key nT and said terminal identification number IDT to said IC card.
Claim 18
Dependent Claim
223 words
An IC card comprising: a memory wherein there are prestored a master public key nA, a card secret key pU and qU for the creation of a digital signature of said IC card, a card identification number IDU, a card public key nU for verifying said digital signature of said IC card, a first master digital signature SA1 by said master key for information including said identification number IDU and said card public key nU, amount value information V, and a third master digital signature SA3 by said master key for information including said amount value information V and said card identification number IDU; means which transmits said public key nU, said card identification number IDU and said first master digital signature SA1 to said IC card terminal upon insertion thereinto of said IC card. means for creating a digital signature SU by said card secret key for information including said amount value information V; means for transmitting said amount value information V and said digital signature SU to said IC card terminal upon receiving an anthentication notice from said IC card terminal; and means for verifying received second master digital signatures SA2 and ST by said public keys nA and nT, respectively, and stores amount value information V' in said memory when said second master digital signatures SA2 and ST are valid.
Claim 19
Dependent Claim
197 words
An IC card terminal comprising: a memory having stored therein a terminal identification number for specifying said IC card terminal; a memory for storing card identification numbers as a card identification number list; means for matching the card identification number received from an IC card with data in said identification number list and for initiating a service if amount value information received from said IC card is sufficient when said card identification number received from said IC card does not any one said card identification numbers in said list; means for transmitting said terminal identification number to said IC card together with new amount value information after completion of said service; means whereby only in the case of transmitting said new amount value information to said IC card, usage/management information is created from previous usage information including amount value information, the card identification number and the terminal identification number, received from said IC card prior to the start of said service; means for transmitting said usage/management information to a management center together with said card identification number; and means whereby card identification numbers received from said management center are additionally registered in said card identification number list.
Claim 20
Dependent Claim
175 words
An IC prepaid card system comprising: an IC card including: usage information memory means for storing a card identification number identifying said IC card and previous usage information including amount value information; means for said card identification number, said amount value information and said previous usage information to an IC card terminal; and means for receiving new amount value information and usage information including a terminal identification number from said IC card terminal and for storing them in said usage information memory means; said IC card terminal of claim 19; and a management center which has a database for storing usage/management information for each IC card identification number and means whereby the card identification number and usage/management information received from said IC card terminal are matched with card identification numbers and usage/management information registered in said database and, when they do not match each other, said card identification number and usage/management information from said IC card terminal are additionally registered in said database, whereas when they match, identified identification number is transmitted IC and terminals.
Claim 21
Dependent Claim
38 words
The IC prepaid card system of claim 20, wherein at least one of said IC card and said IC card terminal has random generating means, said usage information containing a random number generated by said random generating means.
Claim 22
Dependent Claim
275 words
An IC card terminal comprising: means for updating a time stamp at proper intervals by a predetermined algorithm; means which upon each updating of said time stamp, transmits update information representing the number of updates to a management center; a memory wherein there are stored a terminal identification number for specifying a terminal, said time stamp, said update information, a terminal secret key for creating a digital signature and a public key for verifying said digital signature; a memory wherein a terminal identification number, a time stamp initial value and update information received from said management center are recorded as a terminal list; means whereby a terminal identification number received from an IC card is matched with said terminal identification numbers in said terminal list, and when the former matches any one of the latter, the time stamp initial value in said terminal list is updated by said predetermined algorithm in accordance with update information received from said IC card, and a digital signature received from said IC card is verified by said updated time stamp and a public key received from said IC card, and when said digital signature is valid, said received update information is matched with update information of said previously matched terminal number in said terminal list, thereby judges the time when said IC card was used at said IC card terminal of said received terminal identification number; means for digitally signing said update time stamp by use of said terminal secret key; and means for transmitting the terminal indentification number for specifying said IC card terminal, said update information, said public key and said digital signature to said IC card.
Claim 23
Dependent Claim
165 words
An IC card system comprising: said IC card terminal of claim 22; an IC card having a memory wherein the terminal identification number update information, a public key and a digital signature for a time stamp received from said IC card terminal are stored, and means whereby when said IC card is inserted into an IC card terminal, said terminal identification number, said update information, said public key and said digital signature for time stamp in said memory are transmitted to said IC card terminal; and a management center which has a database for managing the terminal identification number of each IC card terminal, an initial value of the time stamp and update information, means whereby update information received from said IC card terminal is replaced for update information of the corresponding terminal identification number in said database, and means whereby a selected set of terminal identification number, time stamp initial value and update information in said database are transmitted to every IC card terminal.
Claim 24
Dependent Claim
221 words
An IC credit card comprising: a memory for storing an identification number IDU for specifying a user, a password setting number Ns, a digital signature SA by a master key for information including said identification number IDU and a password Nc; means for transmitting said identification number IDU and said digital signature SA to an IC card terminal; means whereby a password setting number Ns' received from said IC card terminal is matched with said password setting number Ns stored in said memory, and when they match each other, a first authentication notice is transmitted to said IC card terminal; means whereby at the time of registering a password, a password Nc, a digital signature ST by said IC card terminal for information including said password Nc and a terminal public key nT of said IC card terminal are received from said IC card terminal and said received digital signature ST is verified by said terminal public key nT and only when said digital signature ST is valid, said received password Nc is record in said memory; and means whereby prior to the start of a service a password Nc' received from said IC card terminal is matched with said password Nc stored in said memory and, when they match, a second authentication notice is transmitted to said IC card terminal.
Claim 25
Dependent Claim
235 words
An IC card terminal comprising: a memory wherein there are stored a master public key nA and a terminal public key nT for verifying a digital signature SA and terminal secret keys pT and qT for creating a terminal digital signature; means which verifies a digital signature SA received from an IC card, by said public key nA and, if an identification number IDU received from said IC card is valid, enables the registration or entering of a password; means whereby when the registration of a password is chosen, an identification number IDU' entered from input means is matched with said identification number IDU received from said IC card and when they match, the input of password setting number is instructed; means for transmitting to said IC card a password setting number Ns' entered from said input means; means which, when having received a first authentication notice from said IC card, creates a digital signature ST by said terminal secret keys pT and qT for information including a password Nc entered from said input means; means for transmitting said password Nc, said digital signature ST and said terminal public key nT to said IC card; means which, when the input of a password is chosen, transmits a password Nc' entered from said input means to said IC card; and means for permitting a service when having received a second authentication notice from said IC card.
Claim 26
Dependent Claim
178 words
An IC card system comprising: an IC card including: means for generating a random number X; means for creating an IC card digital signature SU1 for information including a random number R received from an IC card terminal and said random number R: means whereby a master digital signature SA created by a management center for information including a public key nU of said IC card and a card identification IDU, said random number said digital signature SUI, said public key nU and said card identification number IDU are transmitted to said IC card terminal; means for creating a IC card digital signature SU2 for information including service information M including a service charge, received from said IC card terminal, and said card identification number IDU; and means for transmitting said digital signature SU2 to said IC card terminal; and an IC card terminal which has means for receiving and verifying said digital signatures SU1 and SA, means for creating and transmitting said service information M to said IC card, and means for receiving said digital signature SU2.
Claim 27
Dependent Claim
60 words
The IC card system of claim 26, wherein said IC card terminal includes means whereby a password Nc entered by a user is transmitted to said IC card, and said IC card includes means whereby said password Nc' received from said IC card terminal is matched with a password Nc prestored in a memory to thereby verify said password Nc.
References Cited (Backward Citations)
No citation records indexed.
USPTO Annuity & Maintenance Windows
Maintenance schedule is calculated for granted US utility patents.